summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-03-06i18n: update translations (#8892)James Elliott
* i18n: update translation for settings.json (Romanian) * i18n: update translation for settings.json (French) * i18n: update translation for settings.json (Spanish) * i18n: update translation for settings.json (Arabic) * i18n: update translation for settings.json (Czech) * i18n: update translation for settings.json (Danish) * i18n: update translation for settings.json (German) * i18n: update translation for settings.json (Greek) * i18n: update translation for settings.json (Finnish) * i18n: update translation for settings.json (Italian) * i18n: update translation for settings.json (Japanese) * i18n: update translation for settings.json (Portuguese, Brazilian) * i18n: update translation for settings.json (Dutch) * i18n: update translation for settings.json (Norwegian) * i18n: update translation for settings.json (Polish) * i18n: update translation for settings.json (Portuguese) * i18n: update translation for settings.json (Russian) * i18n: update translation for settings.json (Swedish) * i18n: update translation for settings.json (Ukrainian) * i18n: update translation for settings.json (Norwegian Bokmal)
2025-03-06build(deps): update material-ui monorepo to v6.4.7 (#8887)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06test(suites): use specific nginx image (#8889)James Elliott
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-03-06build(deps): update dependency happy-dom to v17.1.13 (#8873)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06build(deps): update golang docker tag to v1.24.1 (#8879)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06feat(web): change password (#7676)Brynn Crowley
Add the ability for users to change their password from their user settings, without requiring them to use the reset password workflow. User's are required to create a elevated session in order to change their password. Users may not change their password to their current password. The user's current password is required for the password change. Users must follow any established password policies. Administrators are able to turn this feature off. Closes #3548
2025-03-06build(deps): update dependency prettier to v3.5.3 (#8870)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06ci(reviewdog): reinstate in-line commentary for pull requests (#8885)Amir Zarrinkafsh
Signed-off-by: Amir Zarrinkafsh <nightah@me.com>
2025-03-06build(deps): update module github.com/prometheus/client_golang to v1.21.1 ↵renovate[bot]
(#8877) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06build(deps): update caddy:2.9.1-builder docker digest to 4c455f2 (#8880)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06feat: build from authelia/base base image (#8884)Amir Zarrinkafsh
* feat: build from authelia/base base image This change moves Authelia's base image from a musl based distro (alpine) to a glibc based custom image distro (chisel/ubuntu). Signed-off-by: Amir Zarrinkafsh <nightah@me.com> * feat: add mode=max image provenance attestations Signed-off-by: Amir Zarrinkafsh <nightah@me.com> * feat: index digest sha to from statement in provenance attestations Signed-off-by: Amir Zarrinkafsh <nightah@me.com> * feat: add reproducible metadata to provenance attestation Signed-off-by: Amir Zarrinkafsh <nightah@me.com> * feat: add sbom metadata to image manifest Signed-off-by: Amir Zarrinkafsh <nightah@me.com> * fix(suites): prevent race condition in ha mysql test Signed-off-by: Amir Zarrinkafsh <nightah@me.com> * refactor(suites): log to confirm when services are ready Signed-off-by: Amir Zarrinkafsh <nightah@me.com> * fix(suites): increase wait timer for mariadb ha test Signed-off-by: Amir Zarrinkafsh <nightah@me.com> --------- Signed-off-by: Amir Zarrinkafsh <nightah@me.com>
2025-03-05build(deps): update dependency @types/node to v22.13.9 (#8872)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-05build(deps): update typescript-eslint monorepo to v8.26.0 (#8871)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-04build(deps): update dependency go to v1.24.1 (#8878)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-04docs(oidc): add zipline (#8875)Dennis Gaida
2025-03-02build(deps): update github.com/weppos/publicsuffix-go digest to 470a913 (#8863)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-02test(i18n): validate i18n asset overrides (#8869)James Elliott
This adjusts the assets validations to only validate the asset overrides. Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-03-02refactor(webauthn): include all failures for passkeys (#8865)James Elliott
This includes all failures for passkeys as a logged attempt in the auth logs. Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-03-02feat(metrics): record passkey logins separately (#8866)James Elliott
This adjusts the passkey logins to have a wholly unique metric. Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-03-01build: remove service worker and target es2022 (#8862)James Elliott
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-03-01i18n: update translations (#8861)James Elliott
* i18n: update translation for portal.json (Portuguese, Brazilian) * i18n: update translation for portal.json (Romanian) * i18n: update translation for portal.json (Spanish) * i18n: update translation for portal.json (Czech) * i18n: update translation for portal.json (Danish) * i18n: update translation for portal.json (German) * i18n: update translation for portal.json (Italian) * i18n: update translation for portal.json (Dutch) * i18n: update translation for portal.json (Norwegian) * i18n: update translation for portal.json (Polish) * i18n: update translation for portal.json (Portuguese) * i18n: update translation for portal.json (Swedish) * i18n: update translation for portal.json (Ukrainian) * i18n: update translation for portal.json (Norwegian Bokmal)
2025-03-01build(deps): update dependency @types/node to v22.13.8 (#8859)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-01build(deps): update dependency path-to-regexp@&lt;0.1.12 to v0.2.5 (#8853)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-01build(deps): update dependency vite@&lt;3.2.11 to v6.2.0 (#8854)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-01build(deps): update transitive dependencies (#8523)James Elliott
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-03-01i18n: update translations (#8847)James Elliott
* i18n: update translation for portal.json (Chinese Simplified) * i18n: update translation for settings.json (Chinese Simplified)
2025-03-01refactor(api): disable external swagger validation (#8844)Hendrik Sievers
2025-03-01fix(i18n): lack of privacy policy message consistency (#8845)Brynn Crowley
Update the privacy policy acceptance message to use a placeholder-based approach that ensures consistent application branding across all language translations and add server-side validation to verify all translations maintain the required placeholders, preventing runtime issues with missing components. Signed-off-by: Brynn Crowley <littlehill723@gmail.com>
2025-03-01build(deps): update module golang.org/x/time to v0.10.0 (#8852)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-01feat(middlewares): tokenized bucket rate limit (#8321)James Elliott
This adds rate limits to the TOTP second factor endpoint, the Duo second factor endpoint, Session Elevation endpoint, and the Reset Password endpoint. This protection exists as several configurable tokenized buckets anchored to the users remote IP address. In the event the rate limit is exceeded by the user the middleware will respond with a 429 status, a Retry-After header, and JSON body indicating it's rate limited, which the UI will gracefully handle. This has several benefits that compliment the 1FA regulation, specifically in simple architectures it limits the number of SMTP sends a unique client can make, as well as the number of requests a particular client can make in general on specific endpoints where too many requests may indicate either a fault or some form of abuse. Closes #7353, Closes #1947 Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-03-01build(deps): update dependency eslint-plugin-react-hooks to v5.2.0 (#8848)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-01feat(oidc): merged id token claims (#8851)James Elliott
This introduces a feature to the claims policy that allows merging the granted audience into the ID Token. This is not traditionally spec compliant but has some specific use cases. Closes #8619 Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-02-28build(deps): update dependency @types/node to v22.13.7 (#8850)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-28build(deps): update dependency typescript to v5.8.2 (#8849)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-28test(handlers): fix failing webauthn test with regex (#8846)Brynn Crowley
Fix test failing due to different call path on local systems vs buildkite. Signed-off-by: Brynn Crowley <littlehill723@gmail.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2025-02-27build(deps): update module github.com/google/cel-go to v0.24.1 (#8837)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-27build(deps): update node.js to dc4d205 (#8840)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-27build(deps): update github.com/weppos/publicsuffix-go digest to 4c97355 (#8842)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-27feat(web): add new oled theme (#8838)Brynn Crowley
This adds an OLED tuned dark mode theme to the web frontend.
2025-02-26build(deps): update module github.com/google/cel-go to v0.24.0 (#8832)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-26build(deps): update dependency eslint-config-prettier to v10.0.2 (#8835)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-26build(deps): update material-ui monorepo to v6.4.6 (#8836)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-26build(deps): update dependency axios to v1.8.1 (#8834)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-26build(deps): update dependency tailwindcss to v4.0.9 (#8830)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-26build(deps): update traefik docker tag to v3.3.4 (#8831)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-25build(deps): update typescript-eslint monorepo to v8.25.0 (#8824)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-25build(deps): update github.com/weppos/publicsuffix-go digest to a491218 (#8829)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-25build(deps): update dependency vite to v6.2.0 (#8828)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-25build(deps): update traefik docker tag to v2.11.21 (#8827)renovate[bot]
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-25build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 (#8822)dependabot[bot]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.9 to 3.28.10. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0...b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>